Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
File: GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft (raw, json)
Hash identifier: 45slYY1yKtMC/g6s1PlGONxFqre8ulpACxs2Lt0QZwM=
Subject key identifier: 3B:93:40:B8:41:13:16:D2:F0:96:8D:2A:17:C1:8C:1F:28:12:13:7F
Authority key identifier: 19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF
Certificate issuer: /CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
Certificate serial: 019A4EF58340BCD2DA965D956FB8288C56F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
Manifest number: 05EC
Signing time: Tue 04 Nov 2025 13:01:43 +0000
Manifest this update: Tue 04 Nov 2025 13:01:43 +0000
Manifest next update: Wed 05 Nov 2025 13:01:43 +0000
Files and hashes: 1: E9TifD1sfMQN679LyLG0hiwKeX4.roa (hash: 7SvhO02KqCz55FUneR+KgndNdPdJd/1FqEb2wmvkStA=)
2: GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl (hash: n43VX7aI5uH/JeoF/YxktSxnSB/a02TErywnxmH9668=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:83:40:bc:d2:da:96:5d:95:6f:b8:28:8c:56:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
Validity
Not Before: Nov 4 13:01:43 2025 GMT
Not After : Nov 5 13:01:43 2025 GMT
Subject: CN=3b9340b8411316d2f0968d2a17c18c1f2812137f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:2b:af:d9:ab:69:02:68:98:9f:57:1a:2f:
e4:69:a8:72:4e:cb:aa:83:29:fc:cf:c2:ec:a7:a2:
3b:45:60:e9:49:5d:a9:e9:11:ae:03:9b:cb:32:72:
7f:d8:c2:a1:7b:25:2a:00:1e:18:27:33:9d:6e:0f:
e2:75:aa:e2:97:62:4d:9a:8a:a5:4b:5a:54:76:74:
9f:a4:1d:56:af:c8:46:e4:22:1e:15:36:58:46:b4:
29:04:99:00:52:b4:7b:7b:b9:d0:1a:46:6b:c0:f4:
5c:ea:79:77:52:b1:32:c4:03:02:22:79:67:8f:21:
48:0a:4b:d3:d8:95:a7:c4:43:69:b6:79:b9:5b:7d:
48:c8:b5:8f:1d:50:d8:2a:7d:4e:a8:b1:4f:06:00:
51:cc:86:93:4e:fc:0f:9c:81:9e:ee:a2:6d:0b:52:
44:cf:88:2b:33:22:83:09:44:03:1a:f9:f6:bb:2c:
7f:c6:28:0b:91:64:4d:0f:7d:a3:ab:a9:ea:8d:e8:
d1:a6:c3:fc:e8:df:46:7b:fd:1e:13:74:4d:1b:37:
0e:51:45:c7:a8:67:b6:f7:5e:06:ba:21:1f:7d:d6:
55:c3:1f:91:84:b7:8d:7d:c4:36:26:fe:47:51:42:
88:1e:15:46:43:aa:a6:78:2c:49:78:33:d9:0d:fc:
40:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:93:40:B8:41:13:16:D2:F0:96:8D:2A:17:C1:8C:1F:28:12:13:7F
X509v3 Authority Key Identifier:
keyid:19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ee:21:b2:dc:d0:03:5a:6a:8a:59:a4:ca:57:d0:34:38:9b:
14:56:0c:6f:5b:05:ff:eb:ef:14:b2:f9:03:42:d5:d1:ac:e8:
8f:ec:3f:f1:ef:1a:d2:64:fd:30:3e:74:7b:07:46:c2:ef:82:
0d:81:26:04:30:f8:90:28:44:e3:4c:df:1f:95:96:3c:1a:f4:
c6:b0:ad:76:ac:75:23:d4:b6:55:8b:05:1e:f3:75:46:2d:b1:
7f:bc:7c:17:c8:da:27:0b:09:d3:06:ff:52:3b:5c:1c:d1:36:
aa:7c:69:a7:b5:bc:54:f9:fe:87:4a:8d:33:c5:f1:52:54:e1:
09:ff:df:5b:e9:0a:dd:82:f6:1d:10:42:3d:f6:0c:37:29:f1:
dc:28:ee:37:46:4e:be:b6:a0:c6:3e:02:e5:2a:b8:50:c8:06:
3e:fc:0c:97:c0:c2:1a:2f:24:e9:45:0e:fa:78:83:8d:86:68:
33:f9:d7:25:15:ce:37:60:77:a5:80:6c:92:7b:2d:b7:e0:b5:
58:dc:4c:0d:9b:fa:8f:ca:e6:b2:d3:11:48:5b:35:6c:58:02:
87:41:4c:79:06:f6:46:65:b3:33:c0:98:84:e3:24:e4:ee:8e:
ec:bf:87:d0:d5:a6:21:53:6b:54:be:e6:39:8c:ab:ba:5d:2a:
d9:be:18:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9YNAvNLall2Vb7gojFb3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjBhZTY2NmE2ODJiNDI0ZjZjOTk0YWIyZTAxNGRjM2M2
NGZiY2YwHhcNMjUxMTA0MTMwMTQzWhcNMjUxMTA1MTMwMTQzWjAzMTEwLwYDVQQD
EygzYjkzNDBiODQxMTMxNmQyZjA5NjhkMmExN2MxOGMxZjI4MTIxMzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntkrr9mraQJomJ9XGi/kaahyTsuq
gyn8z8Lsp6I7RWDpSV2p6RGuA5vLMnJ/2MKheyUqAB4YJzOdbg/idaril2JNmoql
S1pUdnSfpB1Wr8hG5CIeFTZYRrQpBJkAUrR7e7nQGkZrwPRc6nl3UrEyxAMCInln
jyFICkvT2JWnxENptnm5W31IyLWPHVDYKn1OqLFPBgBRzIaTTvwPnIGe7qJtC1JE
z4grMyKDCUQDGvn2uyx/xigLkWRND32jq6nqjejRpsP86N9Ge/0eE3RNGzcOUUXH
qGe2914GuiEffdZVwx+RhLeNfcQ2Jv5HUUKIHhVGQ6qmeCxJeDPZDfxAuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuTQLhBExbS8JaNKhfBjB8oEhN/MB8GA1UdIwQY
MBaAFBlgrmZqaCtCT2yZSrLgFNw8ZPvPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80YzBkZTktNDJhMy00NGRjLTk5OGUt
NTIzZDIwOTI1ZGFkLzEvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80YzBkZTktNDJhMy00NGRjLTk5OGUtNTIzZDIwOTI1ZGFk
LzEvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnu4hstzQ
A1pqilmkylfQNDibFFYMb1sF/+vvFLL5A0LV0azoj+w/8e8a0mT9MD50ewdGwu+C
DYEmBDD4kChE40zfH5WWPBr0xrCtdqx1I9S2VYsFHvN1Ri2xf7x8F8jaJwsJ0wb/
UjtcHNE2qnxpp7W8VPn+h0qNM8XxUlThCf/fW+kK3YL2HRBCPfYMNynx3CjuN0ZO
vragxj4C5Sq4UMgGPvwMl8DCGi8k6UUO+niDjYZoM/nXJRXON2B3pYBsknstt+C1
WNxMDZv6j8rmstMRSFs1bFgCh0FMeQb2RmWzM8CYhOMk5O6O7L+H0NWmIVNrVL7m
OYyrul0q2b4Y9g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:31 2025 by rpki-client